This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/Q-ec6H9BzZK_liD2lFTGTS7iT0g.roa File: Q-ec6H9BzZK_liD2lFTGTS7iT0g.roa (raw, json) Hash identifier: 1KviszHGUWXOr/tWRch996CmVk/jhxQWF3ZbHboz1x0= Subject key identifier: 43:E7:9C:E8:7F:41:CD:92:BF:96:20:F6:94:54:C6:4D:2E:E2:4F:48 Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Certificate serial: 019ADA84342A998836782048EFF421E696A6 Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/Q-ec6H9BzZK_liD2lFTGTS7iT0g.roa Signing time: Mon 01 Dec 2025 15:24:48 +0000 ROA not before: Mon 01 Dec 2025 15:24:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197143 IP address blocks: 46.245.160.0/24 maxlen: 24 46.245.161.0/24 maxlen: 24 46.245.162.0/24 maxlen: 24 46.245.163.0/24 maxlen: 24 46.245.164.0/24 maxlen: 24 46.245.165.0/24 maxlen: 24 46.245.166.0/24 maxlen: 24 46.245.167.0/24 maxlen: 24 185.33.128.0/24 maxlen: 24 185.33.129.0/24 maxlen: 24 185.33.130.0/24 maxlen: 24 185.33.131.0/24 maxlen: 24 185.218.218.0/24 maxlen: 24 185.218.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:84:34:2a:99:88:36:78:20:48:ef:f4:21:e6:96:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407 Validity Not Before: Dec 1 15:24:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=43e79ce87f41cd92bf9620f69454c64d2ee24f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:ce:bc:05:fd:d3:2e:45:6a:a2:ec:1c:23: 00:1a:0a:08:c7:40:44:b6:f2:26:b7:8c:d0:ca:cf: ac:c6:84:70:ec:2f:e3:5a:13:e2:23:b4:88:22:bd: 14:db:37:ec:4a:0a:6b:99:25:95:7e:cf:06:a0:1d: c8:68:4d:d5:83:f0:a2:78:e4:be:9b:50:06:22:6d: 04:4c:7c:bb:f9:33:13:8e:e1:bd:1f:bb:ee:e2:16: 31:3a:5b:b2:ae:dc:49:0e:85:10:0b:cc:e4:a0:09: 5c:c5:73:5f:d9:7e:14:60:c2:b2:b1:b3:26:cd:a5: 34:5f:1f:54:c8:e2:8c:f0:45:89:21:f5:8f:9c:da: 16:c6:88:ef:3a:78:3b:e9:b5:6d:a7:e9:73:b6:72: 15:5b:3d:41:91:7b:c7:0d:49:2b:63:2f:18:51:f9: ab:fd:1f:23:a3:0e:1f:ca:04:2b:88:cc:df:3d:03: d5:dd:4a:6c:1c:8b:34:5a:9b:be:6b:f2:4d:00:85: 6d:02:b2:5f:fc:01:6c:54:58:86:eb:02:24:77:19: ef:7e:ba:eb:ad:68:e6:06:58:a1:d2:2d:0d:ef:20: 04:4d:e0:fe:99:6a:42:a2:68:8e:b7:fb:b1:eb:3c: 42:7a:5b:b1:e6:28:bb:23:32:d9:29:a8:08:ca:67: 12:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E7:9C:E8:7F:41:CD:92:BF:96:20:F6:94:54:C6:4D:2E:E2:4F:48 X509v3 Authority Key Identifier: keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/Q-ec6H9BzZK_liD2lFTGTS7iT0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.160.0/21 185.33.128.0/22 185.218.218.0/23 Signature Algorithm: sha256WithRSAEncryption b4:10:50:78:6b:b8:d3:05:97:67:e1:7b:c3:6d:01:7f:76:8d: 5e:b4:31:15:fd:c1:c9:82:89:e1:e9:69:74:5b:75:ec:88:6d: 9e:1c:fa:43:4e:5a:d1:71:7e:db:3e:3f:26:a5:01:0d:b9:b7: 6f:96:92:ad:a7:a3:db:d8:42:f1:23:8d:d5:41:52:5f:3d:bc: 91:25:04:8e:8a:83:f4:6c:40:35:b6:7a:ff:1b:45:8d:dc:b9: 7d:2c:c0:d2:6a:68:ef:87:83:47:2b:da:35:08:60:1a:7a:fa: 5e:c5:ad:d5:77:48:6c:88:e7:25:23:cd:65:2b:bf:bb:f6:d4: a3:68:05:69:3f:b8:24:5a:d2:9d:68:46:67:2c:ef:9c:57:04: 53:58:01:12:9b:cc:2d:7b:75:13:61:b5:d3:c7:7b:63:bc:dd: f9:cb:70:1d:3c:38:10:ff:74:c2:1a:60:90:47:91:14:61:2f: 29:52:e8:a7:82:89:59:12:1b:a9:f3:84:ae:ca:63:5f:4b:97: c4:3f:16:20:4e:d2:6a:7f:a1:21:9f:75:aa:af:2a:6f:e0:55: a2:c0:44:f2:90:ac:3c:3f:c6:49:e9:0f:56:9e:e7:6f:13:94: 48:a0:55:cc:e9:7f:f9:81:cd:95:d6:65:00:a4:b9:24:2d:43: 29:06:35:b9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrahDQqmYg2eCBI7/Qh5pamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw ZWU0MDcwHhcNMjUxMjAxMTUyNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2U3OWNlODdmNDFjZDkyYmY5NjIwZjY5NDU0YzY0ZDJlZTI0ZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtrOvAX90y5FaqLsHCMAGgoIx0BE tvImt4zQys+sxoRw7C/jWhPiI7SIIr0U2zfsSgprmSWVfs8GoB3IaE3Vg/CieOS+ m1AGIm0ETHy7+TMTjuG9H7vu4hYxOluyrtxJDoUQC8zkoAlcxXNf2X4UYMKysbMm zaU0Xx9UyOKM8EWJIfWPnNoWxojvOng76bVtp+lztnIVWz1BkXvHDUkrYy8YUfmr /R8jow4fygQriMzfPQPV3UpsHIs0Wpu+a/JNAIVtArJf/AFsVFiG6wIkdxnvfrrr rWjmBlih0i0N7yAETeD+mWpComiOt/ux6zxCelux5ii7IzLZKagIymcSxwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEPnnOh/Qc2Sv5Yg9pRUxk0u4k9IMB8GA1UdIwQY MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt ZDUzODY2ZTkxODZhLzEvUS1lYzZIOUJ6WktfbGlEMmxGVEdUUzdpVDBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQtZDUzODY2ZTkxODZh LzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLvWgAwQC uSGAAwQBudraMA0GCSqGSIb3DQEBCwUAA4IBAQC0EFB4a7jTBZdn4XvDbQF/do1e tDEV/cHJgonh6Wl0W3XsiG2eHPpDTlrRcX7bPj8mpQENubdvlpKtp6Pb2ELxI43V QVJfPbyRJQSOioP0bEA1tnr/G0WN3Ll9LMDSamjvh4NHK9o1CGAaevpexa3Vd0hs iOclI81lK7+79tSjaAVpP7gkWtKdaEZnLO+cVwRTWAESm8wte3UTYbXTx3tjvN35 y3AdPDgQ/3TCGmCQR5EUYS8pUuingolZEhup84SuymNfS5fEPxYgTtJqf6Ehn3Wq rypv4FWiwETykKw8P8ZJ6Q9WnudvE5RIoFXM6X/5gc2V1mUApLkkLUMpBjW5 -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:48 2025 by rpki-client